A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5, which mandates that all WebSocket control frames (e.g., PING, PONG, CLOSE) contain a payload of 125 bytes or less. A remote, unauthenticated attacker can exploit this by sending a non-compliant, oversized control frame. Because the parser handles this protocol violation improperly instead of throwing an immediate connection termination error, it triggers a internal processing crash, resulting in a remote denial of service (DoS) for applications utilizing libsoup WebSockets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade libsoup3-develUpgrade libsoup-docUpgrade libsoup-debugsourceUpgrade libsoup3-docUpgrade libsoup-debuginfoUpgrade libsoup3-debuginfoUpgrade libsoupUpgrade libsoup-develUpgrade libsoup3-debugsourceUpgrade libsoup3 | Sep 1, 2026 | Jul 14, 2026 |
| Redhat_linux | — | Upgrade libsoup3-debuginfoUpgrade libsoup3-develUpgrade libsoup-debugsourceUpgrade libsoup-debuginfoNo solution existsUpgrade libsoup-develUpgrade libsoup3-docUpgrade libsoupUpgrade libsoup3Upgrade libsoup3-debugsource | Jul 17, 2026 | Jul 14, 2026 |
| Rocky_linux | — | Upgrade libsoup-develUpgrade libsoupUpgrade libsoup-debuginfoUpgrade libsoup-debugsource | Sep 18, 2026 | Sep 17, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub